PT-2017-3025 · Microsoft · Windows Server 2016+8
Publicado
2017-10-10
·
Atualizado
2017-10-20
·
CVE-2017-8718
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Microsoft JET Database Engine versions in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016
Description
The issue is related to how the Microsoft JET Database Engine handles objects in memory, leading to a potential buffer overflow. This can allow an attacker to execute arbitrary code and take control of an affected system. The vulnerability can be exploited by remote attackers.
Recommendations
For Windows Server 2008 SP2 and R2 SP1, consider applying security updates to address the issue.
For Windows 7 SP1, Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016, apply the relevant security patches to mitigate the risk of exploitation.
As a temporary workaround, consider restricting access to sensitive areas of the system to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
RCE
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Jet Database Engine
Windows
Windows 10
Windows 7
Windows 8.1
Windows Rt 8.1
Windows Server 2008
Windows Server 2012
Windows Server 2016